Awesome Open Source
Search
Programming Languages
Languages
All Categories
Categories
About

The Top 23 Static Analysis Devsecops Open Source Projects

Open source projects categorized as Static Analysis Devsecops
Categories > Security > Devsecops
Categories > Code Quality > Static Analysis
Mobile Security Framework Mobsf ⭐ 16,123
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
total releases 13most recent commit a month ago
Scanners Box ⭐ 7,927
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
most recent commit 3 months ago
Tfsec ⭐ 6,525
Security scanner for your Terraform code
dependent packages 18total releases 411most recent commit a month ago
Nodejsscan ⭐ 2,275
nodejsscan is a static security code scanner for Node.js applications.
most recent commit 3 months ago
Bearer ⭐ 1,554
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
dependent packages 5total releases 109most recent commit 3 months agonpm @bearer/package-init} Downloads
Opensca Cli ⭐ 964
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
most recent commit 3 months ago
Sast Scan ⭐ 697
Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.
most recent commit 8 months ago
Betterscan Ce ⭐ 673
Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)
most recent commit 2 months ago
Packj ⭐ 573
Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
total releases 15most recent commit 4 months ago
Privado ⭐ 454
Open Source Static Scanning tool to detect data flows in your code, find data security vulnerabilities & generate accurate Play Store Data Safety Report.
total releases 49most recent commit 3 months ago
Shisho ⭐ 358
Lightweight static analyzer for several programming languages
most recent commit 9 months ago
Pycharm Security ⭐ 321
Finds security holes in your Python projects from PyCharm and GitHub
most recent commit 6 months ago
Njsscan ⭐ 318
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
dependent packages 1total releases 36most recent commit 8 months agopypi njsscan} Downloads
Sbt Dependency Check ⭐ 259
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈
most recent commit 4 months ago
Qodana Action ⭐ 232
⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle
most recent commit 3 months ago
Checkov Action ⭐ 188
This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.
most recent commit 3 months ago
Awesome Software Supply Chain Security ⭐ 165
A compilation of resources in the software supply chain security domain, with emphasis on open source
most recent commit a year ago
Squealer ⭐ 140
Telling tales on you for leaking secrets!
dependent packages 51total releases 45most recent commit 5 months ago
Sonarqube Action ⭐ 131
Integrate SonarQube scanner to GitHub Actions
most recent commit 5 months ago
Intercept ⭐ 74
INTERCEPT / Policy as Code Auditing / SAST for Code & APIs
total releases 4most recent commit 3 months ago
Bridgecrew Action ⭐ 72
This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.
most recent commit 5 months ago
Cpplumber ⭐ 68
Static analysis tool based on clang, which detects source-to-binary information leaks in C and C++ projects
most recent commit 2 years ago
Njsscan Action ⭐ 20
nodejsscan Github Action
most recent commit a year ago
The 4 Most Depended On Static Analysis Devsecops Open Source Projects
Squealer ⭐ 140
Telling tales on you for leaking secrets!
dependent packages 51total releases 45latest release August 17, 2023most recent commit 5 months ago
Tfsec ⭐ 6,525
Security scanner for your Terraform code
dependent packages 18total releases 411latest release September 11, 2023most recent commit a month ago
Bearer ⭐ 1,554
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
dependent packages 5total releases 109latest release May 03, 2019most recent commit 3 months agonpm @bearer/package-init} Downloads
Njsscan ⭐ 318
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
dependent packages 1total releases 36latest release August 30, 2023most recent commit 8 months agopypi njsscan} Downloads
The 8 Latest Releases In Static Analysis Devsecops Open Source Projects
Intercept ⭐ 74
INTERCEPT / Policy as Code Auditing / SAST for Code & APIs
total releases 4latest release October 28, 2023most recent commit 3 months ago
Tfsec ⭐ 6,525
Security scanner for your Terraform code
dependent packages 18total releases 411latest release September 11, 2023most recent commit a month ago
Njsscan ⭐ 318
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
dependent packages 1total releases 36latest release August 30, 2023most recent commit 8 months agopypi njsscan} Downloads
Squealer ⭐ 140
Telling tales on you for leaking secrets!
dependent packages 51total releases 45latest release August 17, 2023most recent commit 5 months ago
Bearer ⭐ 1,554
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
dependent packages 5total releases 109latest release May 03, 2019most recent commit 3 months agonpm @bearer/package-init} Downloads
Popular Security Categories
Security
Token
Authentication
Password
Oauth
Scanner
Cryptography
Ssh
Role
Session
Categories
Privacy | About | Terms | Follow Us On Twitter

Downloads, Dependent Repos, Dependent Packages, Total Releases, Latest Releases data powered by Libraries.io.

Copyright 2018-2024 Awesome Open Source.  All rights reserved.